Recent vulnerabilities
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| cve-2025-50025 | 5.9 (v3.1) | WordPress CP Polls plugin <= 1.0.81 - Cross Site Scrip… |
codepeople |
CP Polls |
2025-06-20T15:03:56.190Z | 2026-04-28T16:13:16.411Z |
| cve-2025-50016 | 5.9 (v3.1) | WordPress IP Based Login plugin <= 2.4.2 - Cross Site … |
brijeshk89 |
IP Based Login |
2025-06-20T15:04:00.804Z | 2026-04-28T16:13:16.411Z |
| cve-2025-50031 | 6.5 (v3.1) | WordPress DB Backup <= 6.0 - Broken Access Control Vul… |
syedamirhussain91 |
DB Backup |
2025-08-14T10:34:05.698Z | 2026-04-28T16:13:16.407Z |
| cve-2025-50028 | 6.5 (v3.1) | WordPress Ultimate Push Notifications plugin <= 1.2.0 … |
CodeSolz |
Ultimate Push Notifications |
2025-07-16T11:27:57.237Z | 2026-04-28T16:13:16.401Z |
| cve-2025-50027 | 5.9 (v3.1) | WordPress Login/Signup Popup plugin <= 2.9.4 - Cross S… |
xootix |
Login/Signup Popup |
2025-06-20T15:03:55.228Z | 2026-04-28T16:13:16.400Z |
| cve-2025-50018 | 5.9 (v3.1) | WordPress Tealium plugin <= 2.1.20 - Cross Site Script… |
Tealium |
Tealium |
2025-06-20T15:03:59.522Z | 2026-04-28T16:13:16.400Z |
| cve-2025-50024 | 5.9 (v3.1) | WordPress ATP Call Now plugin <= 1.0.3 - Cross Site Sc… |
Truong Thanh |
ATP Call Now |
2025-06-20T15:03:56.651Z | 2026-04-28T16:13:16.398Z |
| cve-2025-50029 | 6.5 (v3.1) | WordPress AI Tools <= 4.0.7 - Arbitrary Content Deleti… |
Ashish |
AI Tools |
2025-08-14T10:34:06.255Z | 2026-04-28T16:13:16.396Z |
| cve-2025-50019 | 5.9 (v3.1) | WordPress Simple Sticky Footer plugin <= 1.3.5 - Cros… |
Sandor Kovacs |
Simple Sticky Footer |
2025-06-20T15:03:59.026Z | 2026-04-28T16:13:16.395Z |
| cve-2025-50023 | 5.9 (v3.1) | WordPress CodePen Embed Block plugin <= 1.2.0 - Cross … |
Chris Coyier |
CodePen Embed Block |
2025-06-20T15:03:57.125Z | 2026-04-28T16:13:16.390Z |
| cve-2025-50020 | 5.9 (v3.1) | WordPress RDFa Breadcrumb plugin <= 2.3 - Cross Site S… |
Nitin Yawalkar |
RDFa Breadcrumb |
2025-06-20T15:03:58.555Z | 2026-04-28T16:13:16.386Z |
| cve-2025-50032 | 6.5 (v3.1) | WordPress Paytiko for WooCommerce plugin <= 1.3.21 - B… |
Paytiko - Payment Orchestration Platform |
Paytiko for WooCommerce |
2025-07-04T11:17:57.979Z | 2026-04-28T16:13:16.370Z |
| cve-2025-50021 | 5.9 (v3.1) | WordPress Better Random Redirect plugin <= 1.3.20 - Cr… |
Robert Peake |
Better Random Redirect |
2025-06-20T15:03:58.071Z | 2026-04-28T16:13:16.368Z |
| cve-2025-50026 | 5.9 (v3.1) | WordPress Spoki plugin <= 2.17.0 - Cross Site Scriptin… |
spoki |
Spoki |
2025-06-20T15:03:55.684Z | 2026-04-28T16:13:16.359Z |
| cve-2025-50022 | 5.9 (v3.1) | WordPress WP-FB-AutoConnect plugin <= 4.6.4 - Cross Si… |
JK |
WP-FB-AutoConnect |
2025-06-20T15:03:57.594Z | 2026-04-28T16:13:16.341Z |
| cve-2025-50017 | 5.9 (v3.1) | WordPress WP Voting Contest plugin <= 5.8 - Cross Site… |
Matt |
WP Voting Contest |
2025-06-20T15:03:59.993Z | 2026-04-28T16:13:16.340Z |
| cve-2025-50014 | 5.9 (v3.1) | WordPress PDPA Consent for Thailand plugin <= 1.1.1 - … |
iamapinan |
PDPA Consent for Thailand |
2025-06-20T15:04:01.831Z | 2026-04-28T16:13:15.978Z |
| cve-2025-50009 | 5.4 (v3.1) | WordPress Kata Plus plugin <= 1.5.3 - Broken Access Co… |
Climax Themes |
Kata Plus |
2025-06-20T15:04:04.413Z | 2026-04-28T16:13:15.914Z |
| cve-2025-50013 | 5.9 (v3.1) | WordPress CSV Importer Improved plugin <= 0.6.1 - Cros… |
Jason Judge |
CSV Importer Improved |
2025-06-20T15:04:02.485Z | 2026-04-28T16:13:15.907Z |
| cve-2025-50008 | 5.4 (v3.1) | WordPress WooCommerce Manager – Customize and Control … |
cscode |
WooCommerce Manager – Customize and Control Cart page, Add to Cart button, Checkout fields easily |
2025-06-20T15:04:04.919Z | 2026-04-28T16:13:15.894Z |
| cve-2025-50011 | 5.9 (v3.1) | WordPress plugin Recipes manager - WPH <=1.0.4 - Cros… |
Félix Martínez |
Recipes manager - WPH |
2025-06-20T15:04:03.446Z | 2026-04-28T16:13:15.893Z |
| cve-2025-50006 | 7.1 (v3.1) | WordPress xSmart theme <= 1.2.9.4 - Reflected Cross Si… |
Jthemes |
xSmart |
2026-01-22T16:51:44.554Z | 2026-04-28T16:13:15.890Z |
| cve-2025-50012 | 5.9 (v3.1) | WordPress Inventory Presser plugin <= 15.2.6 - Cross S… |
fridaysystems |
Inventory Presser |
2025-06-20T15:04:02.968Z | 2026-04-28T16:13:15.879Z |
| cve-2025-50010 | 5.4 (v3.1) | WordPress Zapier for WordPress plugin <= 1.5.2 - Broke… |
Zapier |
Zapier for WordPress |
2025-06-20T15:04:03.937Z | 2026-04-28T16:13:15.874Z |
| cve-2025-50005 | 6.5 (v3.1) | WordPress tagDiv Composer plugin <= 5.4.2 - Cross Site… |
tagDiv |
tagDiv Composer |
2026-01-22T16:51:44.352Z | 2026-04-28T16:13:15.858Z |
| cve-2025-50002 | 10 (v3.1) | WordPress Energia theme <= 1.1.2 - Arbitrary File Uplo… |
Farost |
Energia |
2026-01-22T16:51:43.748Z | 2026-04-28T16:13:15.836Z |
| cve-2025-50004 | 8.8 (v3.1) | WordPress JupiterX Core plugin <= 4.10.1 - PHP Object … |
artbees |
JupiterX Core |
2026-01-22T16:51:44.164Z | 2026-04-28T16:13:15.821Z |
| cve-2025-50003 | 8.1 (v3.1) | WordPress Amuli theme <= 2.3.0 - Local File Inclusion … |
axiomthemes |
Amuli |
2026-01-22T16:51:43.965Z | 2026-04-28T16:13:15.818Z |
| cve-2025-49986 | 5.3 (v3.1) | WordPress Video List Manager plugin <= 1.7 - Broken Ac… |
thanhtungtnt |
Video List Manager |
2025-06-20T15:04:10.215Z | 2026-04-28T16:13:15.705Z |
| cve-2025-49994 | 8.1 (v3.1) | WordPress Athens theme <= 1.1.6 - Local File Inclusion… |
ovatheme |
Athens |
2026-01-22T16:51:43.534Z | 2026-04-28T16:13:15.653Z |
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Updated |
|---|
| ID | Description | Published | Updated |
|---|---|---|---|
| certfr-2021-avi-340 | Vulnérabilité dans Mozilla Firefox ESR et Thunderbird | 2021-05-05T00:00:00.000000 | 2021-05-05T00:00:00.000000 |
| certfr-2021-avi-339 | Multiples vulnérabilités dans Google Chrome OS | 2021-05-05T00:00:00.000000 | 2021-05-05T00:00:00.000000 |
| certfr-2021-avi-338 | Vulnérabilité dans Apache OpenOffice | 2021-05-04T00:00:00.000000 | 2021-05-04T00:00:00.000000 |
| certfr-2021-avi-337 | Multiples vulnérabilités dans Google Android | 2021-05-04T00:00:00.000000 | 2021-05-04T00:00:00.000000 |
| certfr-2021-avi-336 | Multiples vulnérabilités dans les produits Apple | 2021-05-04T00:00:00.000000 | 2021-05-04T00:00:00.000000 |
| certfr-2021-avi-325 | Multiples vulnérabilités dans BIND | 2021-04-29T00:00:00.000000 | 2021-05-04T00:00:00.000000 |
| certfr-2021-avi-335 | Multiples vulnérabilités dans Pulse Connect Secure | 2021-05-03T00:00:00.000000 | 2021-05-03T00:00:00.000000 |
| certfr-2021-avi-334 | Vulnérabilité dans Qnap QTS | 2021-05-03T00:00:00.000000 | 2021-05-03T00:00:00.000000 |
| certfr-2021-avi-333 | Vulnérabilité dans MongoDB Server | 2021-05-03T00:00:00.000000 | 2021-05-03T00:00:00.000000 |
| certfr-2021-avi-332 | Vulnérabilité dans IBM Db2 | 2021-05-03T00:00:00.000000 | 2021-05-03T00:00:00.000000 |
| certfr-2021-avi-331 | Multiples vulnérabilités dans Microsoft Edge | 2021-04-30T00:00:00.000000 | 2021-04-30T00:00:00.000000 |
| certfr-2021-avi-330 | Multiples vulnérabilités dans PHP | 2021-04-30T00:00:00.000000 | 2021-04-30T00:00:00.000000 |
| certfr-2021-avi-329 | Multiples vulnérabilités dans le noyau Linux de SUSE | 2021-04-30T00:00:00.000000 | 2021-04-30T00:00:00.000000 |
| certfr-2021-avi-328 | Vulnérabilité dans Samba | 2021-04-29T00:00:00.000000 | 2021-04-29T00:00:00.000000 |
| certfr-2021-avi-327 | Multiples vulnérabilités dans F5 BIG-IP | 2021-04-29T00:00:00.000000 | 2021-04-29T00:00:00.000000 |
| certfr-2021-avi-326 | Multiples vulnérabilités dans Cisco ASA et FTD | 2021-04-29T00:00:00.000000 | 2021-04-29T00:00:00.000000 |
| certfr-2021-avi-324 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2021-04-28T00:00:00.000000 | 2021-04-28T00:00:00.000000 |
| certfr-2021-avi-323 | Vulnérabilité dans le noyau Linux de SUSE | 2021-04-28T00:00:00.000000 | 2021-04-28T00:00:00.000000 |
| certfr-2021-avi-322 | Multiples vulnérabilités dans GitLab | 2021-04-28T00:00:00.000000 | 2021-04-28T00:00:00.000000 |
| certfr-2021-avi-321 | Vulnérabilité dans Citrix ShareFile storage zones controller | 2021-04-28T00:00:00.000000 | 2021-04-28T00:00:00.000000 |
| certfr-2021-avi-320 | Vulnérabilité dans Fortinet FortiWAN | 2021-04-28T00:00:00.000000 | 2021-04-28T00:00:00.000000 |
| certfr-2021-avi-319 | Multiples vulnérabilités dans Moxa NPort | 2021-04-28T00:00:00.000000 | 2021-04-28T00:00:00.000000 |
| certfr-2021-avi-318 | Multiples vulnérabilités dans Zimbra | 2021-04-27T00:00:00.000000 | 2021-04-27T00:00:00.000000 |
| certfr-2021-avi-317 | Multiples vulnérabilités dans Google Chrome | 2021-04-27T00:00:00.000000 | 2021-04-27T00:00:00.000000 |
| certfr-2021-avi-316 | Vulnérabilité dans Kaspersky Password Manager | 2021-04-27T00:00:00.000000 | 2021-04-27T00:00:00.000000 |
| certfr-2021-avi-315 | Multiples vulnérabilités dans IBM DB2 | 2021-04-27T00:00:00.000000 | 2021-04-27T00:00:00.000000 |
| certfr-2021-avi-314 | Multiples vulnérabilités dans les produits Apple | 2021-04-27T00:00:00.000000 | 2021-04-27T00:00:00.000000 |
| certfr-2021-avi-313 | Multiples vulnérabilités dans Stormshield Management Center | 2021-04-26T00:00:00.000000 | 2021-04-27T00:00:00.000000 |
| certfr-2021-avi-312 | Multiples vulnérabilités dans le noyau Linux de Red Hat | 2021-04-26T00:00:00.000000 | 2021-04-26T00:00:00.000000 |
| certfr-2021-avi-311 | Multiples vulnérabilités dans Microsoft Edge | 2021-04-23T00:00:00.000000 | 2021-04-23T00:00:00.000000 |